All Apps and Add-ons

Web Analytics Site Override

seanp
Path Finder

I am planning on using the Splunk App for Web Analytics to provide information from a multiple webservers with multiple sites. When I exam the logs, it records each the sitename as W3SVC1, for example. In the app, configuring the site (Setup - Websites) using the site as W3SVC1 it works properly. However if I change the Site to the URL mysite.contoso.com, I get the a Reason:

Site in logs and in lookup mismatch. This might be ok if you want to override the default site name in the logs.

Yes, I would like to override this so it makes more sense to end users, instead of multiple W3SVC1 listed. If I move forward with the URL, I can run Generate user sessions, but if I run Generate pages, it returns 0 results. Using W3SVC1 Generate user sessions and Generate pages works properly.

Is there a way to override the Site in step 2 of Setup - Websites for the website configuration?

I am using IIS logs and I did read that I can make one site log and then it will display this, but ideally I would rather have each site have its own logs. Alternatively, if someone knows of another web analytics app, I would be interested.

Thank you!

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Meet the .conf26 AI Agent Buildathon Winners

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents ...

Trusted Autonomy in the SOC: A Maturity Journey

AI is compressing attacker timelines and pushing SOC teams beyond human capacity thresholds. The next SOC ...

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...